Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
File:                     3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json)
Hash identifier:          e68hC5yPYmFaxVBoe38NH5/HYlZncv0oC5oKBudBv5I=
Subject key identifier:   F9:59:E0:A1:10:0D:19:F1:0F:BD:37:F7:52:10:84:94:3A:D5:C1:3D
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Certificate issuer:       /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial:       019748F9EB96F0C5E7EC5059186D581BAF67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
Manifest number:          0F7F
Signing time:             Sat 07 Jun 2025 06:00:27 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:27 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:27 +0000
Files and hashes:         1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: GKY7Ic+cUmZ30WLxbUNhdfBeLYZSuN9MaJXyDaBQtB8=)
                          2: CXuHSCaFxVaRaAru4-iFvdd0d-g.roa (hash: po3EKI/Ie4MxQDtGyWIOYbTAnH49FsuKgvn3GW+cz7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:f9:eb:96:f0:c5:e7:ec:50:59:18:6d:58:1b:af:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
        Validity
            Not Before: Jun  7 06:00:27 2025 GMT
            Not After : Jun  8 06:00:27 2025 GMT
        Subject: CN=f959e0a1100d19f10fbd37f7521084943ad5c13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:37:a4:d6:18:2f:f2:c9:82:03:f8:92:40:cc:
                    bb:3d:de:55:7a:31:b6:6a:a4:c4:c8:7f:fc:7d:dc:
                    61:4e:63:cc:9f:20:01:3d:72:10:b5:51:de:9a:1c:
                    72:1a:56:ed:7f:7c:dc:05:a0:95:40:9c:18:f9:ad:
                    33:b8:8e:b0:c0:4f:a9:ad:90:79:a4:75:0e:ca:2e:
                    78:cc:90:39:d6:0b:f6:5a:a2:b8:07:d4:76:6f:fd:
                    df:e8:61:e2:33:96:ff:1e:ce:d2:32:36:fa:3e:e4:
                    8b:9d:36:77:53:87:62:b5:f5:32:d0:69:8a:76:a6:
                    13:2a:3b:75:da:35:d3:0b:d7:a1:dd:70:17:f9:eb:
                    67:9f:d7:9c:78:15:c9:bd:6e:34:8a:bb:bd:4b:93:
                    df:d3:01:74:ba:76:4a:ae:b6:18:e6:45:b9:ac:d1:
                    d0:04:4e:ea:bd:a0:52:36:98:5f:36:79:de:cb:4a:
                    40:8c:fd:cc:e6:90:89:61:e7:78:85:1b:0e:fd:4f:
                    45:50:c3:40:b4:17:94:6a:83:fb:03:42:b0:a7:35:
                    7b:80:0a:5e:fa:e2:6b:0d:cc:ff:a9:1a:8e:9a:a7:
                    cd:c9:86:16:89:71:69:0f:de:56:83:fa:73:cc:9a:
                    27:b5:18:da:f3:c2:94:3a:0a:70:32:cf:47:0b:75:
                    f4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:59:E0:A1:10:0D:19:F1:0F:BD:37:F7:52:10:84:94:3A:D5:C1:3D
            X509v3 Authority Key Identifier:
                keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f4:d1:48:31:fe:09:8f:7d:1c:39:11:ce:79:4e:df:98:8e:
         a7:38:cf:ce:6c:36:8b:69:db:0b:2a:97:17:3d:a6:9f:cb:39:
         c9:6a:26:6c:d7:e0:4d:1a:5a:48:e3:d7:f8:f9:9c:a0:65:e9:
         bf:bc:d9:89:13:c7:1d:22:9f:ea:33:2f:a7:f4:78:cc:19:fb:
         ec:13:6b:c3:9c:76:9d:82:d8:55:59:7d:38:7a:07:83:75:a9:
         5f:e4:53:ed:38:82:b6:a0:f3:5e:10:d4:29:30:6f:29:58:35:
         4c:25:92:05:14:69:16:c8:e2:d0:e5:bd:ec:27:30:21:19:17:
         2d:73:03:fa:20:17:1f:5d:07:ae:56:72:11:be:10:79:9b:df:
         9b:3b:1e:cc:a7:24:be:d8:f7:bd:2f:02:07:01:56:0e:99:51:
         13:2c:f1:6e:23:b7:49:a6:5e:41:a1:b5:c4:92:e2:49:0f:48:
         a7:f9:f5:58:e5:12:cd:f4:a6:74:d7:c7:4b:7b:b0:24:41:a4:
         a3:e4:bb:69:39:de:cc:9a:a8:28:c0:8f:14:7d:cb:4f:0c:d2:
         23:19:7f:93:7d:11:16:2d:58:5f:86:6e:c2:81:17:c8:53:ca:
         06:43:24:31:3f:53:36:7a:ce:8d:b2:59:13:ca:6d:4c:ba:72:
         9a:19:33:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:33:27 2025 by rpki-client